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BACKGROUND OF THE INVENTION 

The present invention relates to dual writing 
of data to be executed through the effect of two control- 
lers. In particular^ the present invention is effective 
5 in the case that a long distance exists between the two 
controllers so that a delay takes place in transferring 
data between the controllers • 

The following techniques have been disclosed as 
the prior art of the present invention. 

10 The European Patent Publication No. 0671686A1 

has disclosed a technique of doing dual writing through 
the effect of controllers spaced from each other by a 
long distance. In this technique, one controller 
guarantees data on a disk therein if the other controller 

15 is broken by a disaster such as an earthquake. The 

technique disclosed in EP-0671686A1 is arranged so that a 
primary controller directly receives write data from a 
host computer, transfers the received write data to a 
secondary controller located in a remote place, and 

20 reports completion of receipt of the write data to a host 
computer. This is a quite excellent method from a view- 
point of data security because the data to be stored in 
the primary controller is completely equivalent to the 
data to be stored in the secondary controller. However, 

25 a longer distance existing between two controllers makes 
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a data transfer time between the controllers far larger. 
This method therefore has difficulty on performance to be 
solved if one controller is far away from the other con- 
troller. 

5 The European Patent Application Publication No. 

0672985A1 also has disclosed a technique of doing dual 
writing on disks loaded in two controllers far away from 
each other. The technique disclosed in EP-0672985A1 is 
arranged so that a primary controller directly receives 

10 write data from a primary host computer ^ iiranediately 
after receipt of the write data, reports completion of 
the receipt of the write data to the primary host 
computer. In the EP-0672985A1 , a copy of the write data 
received by the primary controller is read out to the 

15 primary host computer. According to the invention, a 

time stamp is given to the write data received from the 
primairy host computer for the first time. The time stamp 
indicates a time when a request for writing the write 
data is issued. When the copy of the write data is read 

20 out to the primary host computer, the write time is 

passed to the primary host computer as well. Then, the 
primary host computer sends the copy of the write data 
and the write time to a secondary host computer. 

When the secondajry host computer receives the 

25 write data and the write time, information such as the 
write data is written on the disk for the control 
purpose. Further, the write data is written on the disk 
on the secondary side in the sequence of the write time 
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by referring to the time given to each write data record. 

In the EP-06729851A1, the secondary host 
computer performs the foregoing procedure, because it is 
not desirable to leave the intermediate results of the 
5 transactions normally used by an online system. For 

example, considering a transaction of transferring a bank 
deposit from a bank account A to another bank account B, 
though the deposit is withdrawn from the bank account A, 
the state of having transferred no corresponding deposit 

10 to the bank account B is not left. This means that no 

intermediate result of the transaction is left. Normal- 
ly, the recovery unit is a transaction on the online 
system. Hence, leaving the intermediate result of the 
transaction is a quite significant obstacle. 

15 In turn, why no intermediate result of the 

transaction can be left by the foregoing process will be 
briefly described below. The disks on which data is 
dually written contain a disk for storing a database such 
as account information and a disk for storing a journal 

20 where an update history of the transaction is left. If 
the host computer is failed, a recovery program is 
started to analyze the journal so that the update result 
of the unfinished transaction is returned to the state 
before the execution and no intennediate result of the 

25 transaction is left. The write data written on the disk 
loaded in the secondary controller is effective only in 
the cases such as when the primary controller for storing 
the latest write data is broken. The secondary 
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controller does not store the latest write data but can 
guarantee the write data up to a certain time. Hence, 
apparently, the host computer yields an equivalent state 
to the failed state at a time when the write data is 
5 guaranteed. As a result, by using the disk for storing 
the journal, loaded in the secondary controller and the 
disk for storing the database, the similar process to the 
recovery to be executed when the host computer is failed 
is executed so that the intermediate result of the 

10 transaction may not be left. 

Further, the disk controller contains a non- 
volatile cache memory and provides a write-after 
technique, that is, a technique of writing the write data 
received from the host computer onto a non -volatile cache 

15 memory and reporting the completion of the write to the 
host computer. The non-volatile cache memory is highly 
reliable, so that the data may be sufficiently guaranteed 
by storing the write data in the cache. 

The technique disclosed in the EP-0672985A1 is 

20 arranged to suppress the degrade of the performance 

though some data is lost even if a distance between the 
controllers is expanded. Further, it does not leave the 
intermediate result of the transaction. 

SUMMlOiy OF THE INVENTION 
25 However, the technique disclosed in the 

EP-0672985A1 is arranged so that the primary host 
computer reads out data and transfers the data to the 
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secondary host computer. Hence, unlike the EP-0671686A1 
arranged to directly transfer the write data between the 
controllers, this technique needs one more data trans- 
fers. Further, an I/O process to and from a storage 
5 medium such as an MT is required to be done. 

It is an object of the present invention to 
provide a technique which provides functions of directly 
transferring write data between controllers like the 
EP-0672985A1 , suppressing degrade of the performance to a 

10 minimum even if the distance between the controllers is 
made longer, and leaving no intermediate result of a 
transaction. Further, no execution of the I/O process of 
control information to and from disks is required for 
enhancing the performance . 

15 Later, the description will be oriented to how 

the present invention realizes the aforementioned object. 

According to the present invention, the host 
computer gives a write time to each write data record 
when it issues a request for write to a primary con- 

20 troller. When the primary controller receives the write 
data from the host computer, it reports the completion of 
the receipt to the host computer. Then, the primary 
controller sends the write data records and the write 
times to the secondary controller. At this time, the 

25 primary controller operates to send the write data 

records to the secondary controller in the sequence of 
the writing times . These series of operations make it 
possible to suppress the degrade of the performance to a 



- 6 - 

minimum even though the distance between the controllers 
is made longer. 

The secondary controller operates to store the 
write data received from the primary controller onto a 
non-volatile cache memory. This makes it possible to 
guarantee the write data without any I/O process of 
control information to and from disks. 

The secondary controller can guarantee the 
write data up to a certain time by referring to the 
received write time. This makes it possible to leave no 
intermediate result of the transaction. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a diagram showing a general system 
configuration according to a first embodiment of the 
15 present invention; 

Fig. 2 is a view showing a format of write data 
managing information; 

Fig. 3 is an explanatory view showing a logical 

disk; 

20 Fig. 4 is an explanatory view showing a process 

of a secondary write data destaging unit in the case of 
executing the transfer of the write data from the primary 
controller to the secondary controller; 

Fig. 5 is a diagram showing a general system 
25 configuration according to a second embodiment of the 
present invention ; 

Fig. 6 is a diagram showing a general system 
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configuration according to a third embodiment of the 
present invention; and 

Fig. 7 is a diagram showing a process to be 
executed when a master secondary controller collects 
5 information about the write time from the primary 
controller. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Hereafter, the description will be oriented to 
embodiments of the present invention. 

10 (A) First Embodiment 

At first, the first embodiment will be 
described below. 

Fig. 1 illustrates a general configuration of 
the first embodiment. The system of the first embodiment 

15 is configured to have one or more processing units 100, 
one primary controller 104, one or more disk units 105 
connected to the primary controller 104, one secondary 
controller 109, and one or more disk units 105 connected 
to the secondary controller 109. The processing unit 100 

20 is composed of a CPU 101, a main storage 102, and a 
channel 103. The primary controller 104 contains a 
control memory 107 and a cache memory 108. The control 
memory 107 and the cache memory 108 are non-volatilized. 
For enhancing the reliability, each memory may be 

25 dualized- The cache memory 108 or the control memory 107 
is composed of a semiconductor memory. As compared with 
the disk unit 105, the memory 107 or 108 provides a 
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faster accessing capability by one or two digits . The 
primajT^ controller 104 operates to transfer data between 
the processing unit 100 and the disk unit 105. Further, 
according to the present invention, the primary control- 
5 ler 104 provides a function of transferring data with the 
secondary controller 109. Or, the primary controller 104 
contains one or more directors 106, each of which may 
operate to transfer data between the processing unit 200 
and the disk unit 205 and between the secondary control- 

10 ler 109 and the director 106 itself. The internal 

arrangement of the secondary controller 109 is likewise 
to that of the primary controller 104. 

The write data managing information 113 corre- 
sponding to the write data record 112 is created on the 

15 control memory 107 . 

When the processing unit 100 issues a request 
for write 110 to the primary controller 104, the proces- 
sing unit 100 operates to give a write time 111 to the 
write data record 112. The write time 111 represents a 

20 time when the request for write 110 is issued. The 

primary controller 104 and the secondary controller 109 
can recognize the sequence of the requests for write 110 
issued by the processing unit 100 by referring to this 
write time 111, If two or more processing units 100 are 

25 provided, the write time 111 is defined by using the 

common clocks among the processing units 100, so that the 
primary controller 104 and the secondary controller 108 
can recognize the sequence of the requests for write 110 
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issued by different processing units 110. 

Fig. 2 illustrates a composition of write data 
managing information 113. Herein, in particular , the 
description will be oriented to the information directly 
5 concerned with the present invention. In the present 
invention, a disk to be specified when the processing 
unit 100 issues the request for write 110 is referred to 
as a logical disk. A logical disk ID 120 indicates a 
number of a logical disk indicated by the processing unit 

10 100 so that the corresponding write data is written on 
the logical disk and is contained in the request for 
write 110. This invention does not require the 
one-to-one correspondence between the logical disk 
recognized by the processing unit 100 and the disk unit 

15 105 (physical disk). As illustrated in Fig. 3, the 

logical disk may be defined over two or more disk units 
105. Further, the logical disk may contain redundant 
data and thus employ a RAID (Redundant Array of 
Inexpensive Disks) arrangement. A numeral 121 denotes a 

20 write address that is information (for example, informa- 
tion such as an area of 1 Mbyte starting from a head of 
the logical disk) for indicating an address inside of a 
logical disk where the corresponding write data is to be 
written and is contained in the request for write 110. A 

25 numeral 122 denotes a write data length that represents a 
length of the corresponding write data and is contained 
in the request for write 110. These pieces of informa- 
tion are all contained in the normal request for write 



- 10 - 

110. A ntuneral 123 denotes a write data pointer that is 
a pointer to the corresponding write data 112 in the 
cache memory 108 • The write time 111 has been already 
described above. The write time 111 to be given to the 
5 request for write 110 is a feature of the invention. A 
n\imeral 124 denotes a necessity bit that indicates that 
the write data is required to be transferred to the 
secondary controller. (Herein, the bit 124 is referred 
to as a necessity bit 124.) This necessity bit 124 is 

10 information that represents transfer of the corresponding 
write data 112 to the secondary controller 109. 

Another item of information contained in the 
control memory 107 is a secondary logical disk number 
114. This information is located to correspond to the 

15 logical disk of the primary controller 104 and contains 
the numbers of the secondary logical disk of the corre- 
sponding logical disk, which are paired for dual writing, 
that is, a number of the secondary controller 109 for 
loading the secondary logical disk and a logical disk 

20 number located in the secondary controller 109 of the 

secondairy logical disk. Of course, if the logical disk 
does not have any pair for dual writing, a null value for 
indicating invalidity is put into the logical disk. 

The control memory 107 of the secondary con- 

25 troller 109 contains the write data managing information 
113 as well. The information may have the same format as 
the write data managing information 113 in the primary 
controller 104, in which the necessity bit 124 is 
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constantly off. The control memory 107 of the secondary 
controller 109 contains a primary logical disk number. 
The present information is located to correspond to the 
logical disk of the secondary controller 109 and contains 
5 the numbers of the primary logical disk of the corre- 
sponding logical disk^ which are paired for dual writing, 
that is, the number of the primary controller 104 for 
loading the primary logical disk and the logical disk 
number in the primary controller 104 of the primary 

10 logical disk. Of course, if the logical disk does not 
contain any pair for dual writing, a null value for 
indicating invalidity is put into the logical disk. 

The primary controller 104 provides a primary 
write data receiving unit 130, which is started when it 

15 receives the request for write 110 from the processing 
unit 100. At first, the received write data 112 is 
stored in the cache memory 108 (step 131). Next, the 
primary write data receiving unit 130 operates to secure 
the write data managing information 113 inside of the 

20 control memory 108 for processing this request for write 
(step 132). Further, the information such as the write 
time 111 contained in the request for write is stored in 
the secured write data managing information 113 for 
setting a write data pointer 123 and the necessity bit 

25 124 (step 133). Finally, the completion of the request 
for write 110 is reported to the processing unit 100 
(step 134). The foregoing processing makes it possible 
to do a quick response because no access is required for 
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the disk unit 105. The process of writing the write data 
112 onto the disk unit 105 is executed by the primary 
controller 104 at a later stage. This operation is 
executed by the normal controller. Hence ^ it is not 
5 described in detail. 

The primary controller 104 has a primary write 
data transmitting unit 140 ^ which provides a function of 
transmitting the write data 112 to the secondary con- 
troller 109. At first, the write data record 112 at the 

10 earliest write time, included in the write data managing 
information 113 in which the necessity bit 124 is set, is 
transmitted to the secondary controller 109 having a pair 
for dual writing located therein by referring to the 
corresponding secondary logical disk number 114. The 

15 length of the write data 112 and the address inside of 

the secondairy logical disk where the write data is to be 
written are specified by referring to the information 
contained in the write data managing information 113 
(step 141). Next, the primary write data transmitting 

20 unit 140 waits for a report on the completion from the 

secondary controller 109 (step 142). When the report on 
the completion is given back, the necessity bit 124 is 
set off (step 143). Then, the operation goes back to the 
step 140 at which the next write data to be transmitted 

25 is tried to be found. 

The secondary controller 109 has a secondairy 
write data receiving unit 160, which is started when the 
write data 112 is received from the primairy controller 



104. The processing content of the secondary write data 
receiving unit 160 is likewise to that of the primary 
write data receiving unit 140 except that the setting of 
the write data managing information 113 does not contain 
5 a process of setting the necessity bit 124 (step 161). 
After the write data 112 from the primary controller 104 
is written in the cache 108, the completion of the write 
is reported to the primary controller 104. 

The secondary controller 109 has a secondary 

10 write data destaging unit 170, which provides a function 
of writing the write data 112 to the disk unit 105. At 
first, some write data records 112 included in the write 
data managing information 113 are determined to be 
written in the disk unit 105 in the sequence from the 

15 earliest write time. Then, a necessary calculation is 
executed to determine the disk unit 105 where the write 
data records are to be written and the write address. 
The method of calculation is not described in detail, 
because it is used for the normal RAID (step 171). Next, 

20 two or more requests for writing the write data 112 to 
the disk unit 105 are issued to the disk unit 105 in 
parallel (step 172). Next, the secondary write data 
destaging unit 170 waits for a report on the completion 
of the request (step 173). After the reports on the 

25 completion of all the requests are received, the 

operation goes back to the step 171 at which the next 
write data 113 to be destaged to the next disk unit 105 
is tried to be found. 
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The transmitting sequence of the write data 113 
from the primary controller 104 to the secondary control- 
ler 109 is the sequence of the write time 111. Hence, 
the secondary controller 109 enables to generate a state 
5 that it can hold all the write data records 113 on or 
before a reference time and cannot hold all the write 
data records 113 after the reference time. This opera- 
tion makes it possible for the secondary controller 109 
to do a recovering process without leaving any inter- 

10 mediate result of a transaction if the primary controller 
104 is broken. Further, on the secondary controller 109, 
the control information such as the write data 112 and 
the write time 111 is held in a non-volatile semiconduc- 
tor memory such as the cache memory 108 and the control 

15 memory 107. Hence, no large overhead is burdened on the 
performance . 

The aforementioned process may not provide 
sufficient performance because the transfer of the write 
data 112 from the primary controller 104 to the secondary 

20 controller 109 is serialized. Fig. 4 illustrates the 
process executed in the case of transferring the write 
data 112 from the primary controller 104 to the secondary 
controller 109 in parallel. In each processing unit, a 
primary write data transmitting unit a300, a primary 

25 reference time transmitting unit 170, a secondary refer- 
ence time receiving unit 180, a secondary write data 
destaging unit a310, and a primary fail-time data scrap- 
ping unit 190 are changed from the configuration in which 
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the transfer is serialized. 

Hereafter, the processing flow of the primary 
write data transmitting unit a300 will be described. At 
first, some write data records 112 included in the write 
5 data managing information 113 in which the necessity bit 
124 is set are transferred in parallel to the secondary 
controller 109 having a pair for dual writing located 
therein by referring to the corresponding secondary 
logical disk nximber in the sequence from the earliest 

10 write time (step 301). Next, the primary write data 

transmitting unit a300 waits for a report on the comple- 
tion of each write from the secondary controller 109 
(step 302). After all the reports are given back, the 
necessity bit 124 included in the corresponding write 

15 data managing information 113 is set off (step 303). 
/ Then, the operation goes back to the step 150 at which 
the next write data 112 to be transmitted is tried to be 
found. 

The execution of the parallel transfer of the 
20 write data records 112 may make each write time 111 of 
the write data records 112 be out of the sequence. 
Hence, it is necessary to recognize the reference write 
time 111 for determining the write data 112 to be 
destaged by the secondary controller 109. In this case, 
25 the write data 112 to be destaged is made to have the 
earlier write time 111 than the reference time corre- 
sponding to the earliest write time 111 among the write 
data included in the write data managing information 113 
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where the necessity bit 124 is set on^ which are all 
contained in the primary controller 104. This is because 
all the write data 112 having the earlier write time 111 
than the reference time are held on the side of the 
5 secondary controller 109. On the other hand, the write 
data records 112 having the write time 111 on or before 
the reference time should not be destaged. If the 
primary controller 104 is broken, the write data records 
112 have to be broken without being destaged. 

10 The primary reference time transmitting unit 

170 provides a function of transmitting the destageable 
reference time to the secondary controller 109. As 
mentioned above, the reference time is the earliest write 
time 111 included in the write data managing information 

15 113 where the necessity bit 124 is set on. 

The secondary reference time receiving unit 180 
operates to store the reference time received from the 
primary controller 104 in the control memory 108 as a 
destageable time 185. 

20 Fig. 4 illustrates a processing flow of the 

secondary write data destaging unit aSlO executed in the 
case of transmitting the write data records 112 from the 
primary controller 104 to the secondary controller 109 in 
parallel. The different respect of this flow from the 

25 processing flow shown in Fig. 1 is that the condition for 
selecting the write data 112 to be destaged includes a 
condition for determining if the write time 111 is on or 
before the destageable time 185 (step 311). 
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The primary fail-time data scrapping unit 197 
provides a function of scrapping the write data 112 
having the write time 111 later than the destageable time 
185 when the primary controller 104 is broken (step 191). 
5 (B) Second Embodiment 

Next, the second embodiment will be described 

below. 

Fig. 5 illustrates a system configuration 
according to a second embodiment of the present 

10 invention. The difference between the first and the 
second embodiments is the number of the primary 
controllers 104. The system of the first embodiment is 
configured to have one primary controller 104 and one 
secondary controller 109 , while the system of the second 

15 embodiment is configured to have two or more primary 
controllers 104 and one secondary controller 209. 

The provision of two or more primary con- 
trollers 104 makes the write time 111 of the write data 
112 received from one primary controller 104 shifted from 

20 that received from another primary controller 104 on the 
side of the secondary controller 109. The latest write 
time 111 of the write data 112 received from one primary 
controller 104 (for example, the primary controller a) is 
assumed as a time a, while the latest write time 111 of 

25 the write data 112 received from another primary con- 
troller 104 (for example, the primairy controller b) is 
assumed as a time b. In this assumption, if the time a 
is earlier than the time b, the primary controller b may 
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hold the write data 113 of the time later than the time a 
but earlier than the time b. As mentioned above ^ in 
order to erase the intermediate result of a transaction, 
it is necessary to guarantee all the vncite data records 
5 113 of the write time 112 on or before a reference time 
and discard all the write data records 113 of the later 
write times 112 than the reference time. Hence, the 
write data record 112 of the write time 111 on or before 
the time a is made to be the write data record 112 to be 

10 destaged on the secondary controller 109. 

In correspondence with the above, the control 
memory 108 of the secondary controller 109 stores a write 
enable time 500 to the primary controller. The write 
enable time 500 is the information existing in each 

15 primary controller 104 and is the latest write time 111 
received from the corresponding primary controller 104. 
As mentioned above, therefore, of these write enable 
times 500, the write data record 112 of the write time 
111 on or before the reference time, that is, the 

20 earliest time corresponds to the write data record 112 to 
be destaged onto the secondary controller 109. 

Later, about the present embodiment, the 
description will be oriented to the content of each 
processing unit in the case of transferring the write 

25 data 112 from one primary controller 104 to the secondairy 
controller 109 in parallel. It goes without saying that 
the present embodiment is effective in the case of 
serializing the transfer of the write data 112 from one 
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primary controller 104 to the secondary controller 109. 

The processing flow of each processing unit 
included in the primary controller 104 is likewise to the 
processing flow (the process shown in Fig. 3) executed in 
5 the case of transferring the write data 112 in parallel 
in the first embodiment. 

In turn, the description will be oriented to 
the processing flow of each processing unit included in 
the secondary controller 109. 

10 The description will be oriented to the proces- 

sing flow of a secondary write data destaging unit bSlO. 
Herein , the description will be oriented to the differ- 
ence between the processing flow of the secondary write 
data destaging unit 520 included in the second embodiment 

15 and the processing flow of the secondary write data 

destaging unit 170 included in the first embodiment. The 
content of the process executed in the secondary write 
data receiving unit 510 according to the second embodi- 
ment is executed to check if the corresponding write time 

20 111 is on or before all the write enable times 500 and 
select the write data record 112 for meeting the condi- 
tion (step 511). Except this process , the processing 
flow of the secondary write data destaging unit bSlO 
included in the second embodiment is likewise to the 

25 processing flow of the secondary write data destaging 
unit 170 included in the first embodiment. 

The secondary reference time receiving unit 
b520 operates to set the reference time received from the 



- 20 - 

primary controller 104 as a write enable time 500 of the 
primary controller 104 having transmitted the reference 
time. 

In this embodiment, the write data 112 to be 
5 scrapped by the primary fail-time data scrapping unit 

b530 corresponds to the write data 112 that does not meet 
the condition that the corresponding write time 111 is on 
or before the write enable times 500 of all the primary 
controllers (step 531). 

10 (C) Third Embodiment 

In turn, the description will be oriented to 
the third embodiment of the invention. 

Fig. 6 illustrates a general system configura- 
tion according to the third embodiment. The difference 

15 between the second and the third embodiments is also the 
numbers of the primary controllers 104 and the secondary 
controllers 109. The system of the third embodiment is 
configured to have two or more primary controllers 104 
and one or more secondairy controllers 109. In this case, 

20 each pair of the primary controller 104 and the secondary 
controller 109 is not required to be connected. 

If two or more secondary controllers 109 are 
provided, in order to erase the intermediate result of a 
transaction, it is necessary to keep the reference times 

25 used for selecting the write data records 112 to be 
destaged common among the secondary controllers 109. 
This is because the database and the journal may be 
distributed among the secondary controllers 109. 
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According to this embodiment, a master 
secondary controller 700 provides a function of 
determining the reference time used for selecting the 
write data record 112 to be destaged. Hence, a data 
5 transfer path is connected between the master controller 
700 and the other secondary controllers 109. If the data 
transfer path is failed, it is impossible to keep the 
reference times used for selecting the write data records 
112 to be destaged coiranon among the secondary controllers 

10 109. Hence, multiplexing the data transfer path is 

preferable. In this embodiment, the master secondary 
controller 700 provides a function of determining the 
reference time used for selecting the write data record 
112 to be destaged. Without providing the specific 

15 secondary controller 109 with the function of determining 
the reference time, the method for distributing the 
function among the secondary controllers 109 (for 
example, the method wherein the secondary controllers 109 
alternately determine the reference time) may be employed 

20 for implementing the present invention. 

In correspondence with the above, the control 
memory 109 of the master secondary controller 700 stores 
a write time 701 of the secondary controller. This write 
time 701 is the information corresponding to the second- 

25 ary controllers 109 containing the master secondary 

controller 700. The write time 701 of each secondary 
controller corresponds to the information periodically 
received by the master secondary controller 700 from each 
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secondary controller 109 at the earliest time (the 
reference time on which the secondary controller 109 
selects the secondary controller 109 in the second 
embodiment) among all the primary controller write enable 
5 times 500 contained in the secondary controller 109. 

In the third embodiment, the master write time 
702 is a reference time on which each secondary control- 
ler 109 selects the write data. The master write time 
702 is set by the process wherein the master secondary 

10 controller 700 refers to all the secondary controller 
write times 701 at a proper period and selects the 
earliest time. All the write data records 112 having the 
write times 111 on or before the selected time are con- 
tained in the secondary controller 109. Hence, by 

15 guaranteeing the write data 112 that meet this condition 
and scrapping all the write data 112 that do not meet it, 
it is possible to erase the intermediate result of the 
transaction . 

Hereafter, also in this embodiment, the 

20 description will be oriented to the content of each 

processing unit in the case of transferring the write 
data 112 from one primary controller 104 to the secondary 
controllers 109 in parallel. It goes without saying that 
this embodiment is effective if the transfer of the write 

25 data 112 from one primary controller 104 to the secondary 
controllers 109 is serialized. 

The processing flow of each processing unit 
included in the primary controller 104 is substantially . 
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similar to that of the second embodiment. It goes 
without saying that the primary reference time transmit- 
ting unit 170 provides a function of transmitting a 
reference time to each secondary controller 109 for 
5 transmitting the write data 112. The reference time to 
be transmitted corresponds to the earliest write time 111 
contained in the write data managing information 113 in 
which the necessity bit 124 of each write data record 112 
corresponding to the . secondary controller 109 for trans- 

10 mitting the reference time is set on. 

The different respect of the processing flow of 
the third embodiment from that of the second embodiment 
is that the secondary controller 109 contains a secondary 
write time transmitting unit 710^ a secondary write data 

15 destaging unit c720^ and a primary fail-time data scrap- 
ping point c, and the master secondary controller 700 
contains a master secondary write time receiving unit 
711, a master write time calculating unit 712, and a 
master secondairy write time transmitting unit 713. 

20 The secondary write time transmitting unit 710 

operates to transmit the earliest time 180 included in 
all the primary controller write enable times 500 stored 
in the primary controller 109 to the master secondaiY 
write time receiving unit 711 included in the master 

25 secondary controller 700 at a proper period. The 

secondary write time transmitting unit 710 included in 
the secondarY controller 109 except the master secondary 
controller 700 makes use of a data transfer path between 
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the secondary controllers 109. The secondary write time 
transmitting unit 710 of the master secondary controller 
700 makes use of communicating means provided in the 
master secondary controller 700. 
5 The master secondary write time receiving unit 

711 operates to set the time received from the secondary 
write time transmitting unit 710 to the secondary con- 
troller write time 701 corresponding to the secondary 
controller 109 having transmitted the time. 

10 The master write time calculating unit 712 

operates to refer to all the secondary controller write 
times 701, select the earliest time, and then set the 
time as the master write time 702. 

The master secondary write time transmitting 

15 unit 713 operates to transmit the time set as the master 
write time 702 at a proper period in response to the 
requests issued from the secondary write data destaging 
unit 720 and the primary fail-time data scrapping unit 
7 30 included in each secondary controller 109. The 

20 secondary controller 109 rather than the master secondary 
controller 700 makes use of the data transfer path 
between the secondary controllers 109. For the request 
issued from the master secondary controller 700/ the 
master secondairy write time transmitting unit 713 makes 

25 use of communicating means provided in the master 
secondary controller 700. 

The different respect of the secondary write 
data destaging unit 7 20 from that of the second 
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embodiment is that when selecting the write data 112 to 
be destaged, the secondary write data destaging unit 720 
operates to receive the reference time from the master 
secondary write time transmitting unit 713 and select the 
5 write data 112 with the earlier write time 111 than the 
reference time as the write data to be destaged (step 
721) . 

The different respect of the primary fail-time 
data scrapping unit c730 from that of the second embodi- 

10 ment is that when selecting the write data 112 to be 

scrapped from the cache memory 107, the primary fail-time 
data scrapping unit c730 operates to receive the refer- 
ence time from the master secondary write time transmit- 
ting unit 713 and select the write data 112 except all 

15 the write data 112 with the earlier write time 111 than 

the reference time as the write data to be scrapped (step 
731) . 

According to this embodiment^ the master 
controller 700 is arranged to receive the information 

20 required for calculating the reference time from the 

secondary controller 109. In place, it may be arranged 
to receive the information from the primary controller 
104 as shown in Fig, 7. In this case, the control memory 
108 of the master secondary controller 700 stores a 

25 master primary controller write time 800. The write time 
800 corresponds to the primary controller 104. The write 
time 800 is set as follows. The master secondary con- 
troller 700 receives the earliest write time 111 included 
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in all the write data managing information 113 containing 
the necessity bits 124 being set at a proper period and 
sets it as the write time 800 inside of the primary 
controller 109. For the master write time 702^ the 
5 master secondary controller 700 operates to refer to all 
the primary controller write times 701, select the 
earliest time and set it as the master write time 702 at 
a proper period. Like the foregoing embodiments, the 
reference time for the destaging or the data scrapping is 
10 the master write time 702. 



